From 58db7a06b95529ded07c4c899cb7b06ad52a13b0 Mon Sep 17 00:00:00 2001
From: Melvin Zottola <mzottola@qovery.com>
Date: Fri, 3 Jul 2026 15:11:41 +0200
Subject: [PATCH] feat(qov-1844) Add warning message for gke kms key

---
 .../src/lib/gcp-kms-key/gke-kms-key.tsx       | 33 ++++++++++++++-----
 1 file changed, 24 insertions(+), 9 deletions(-)

diff --git a/libs/domains/clusters/feature/src/lib/gcp-kms-key/gke-kms-key.tsx b/libs/domains/clusters/feature/src/lib/gcp-kms-key/gke-kms-key.tsx
index 42284948dce..3d90f167b0b 100644
--- a/libs/domains/clusters/feature/src/lib/gcp-kms-key/gke-kms-key.tsx
+++ b/libs/domains/clusters/feature/src/lib/gcp-kms-key/gke-kms-key.tsx
@@ -1,6 +1,6 @@
 import { Controller, useFormContext } from 'react-hook-form'
 import { type ClusterGeneralData } from '@qovery/shared/interfaces'
-import { ExternalLink, Icon, InputText, InputToggle, Tooltip } from '@qovery/shared/ui'
+import { Callout, ExternalLink, Icon, InputText, InputToggle, Tooltip } from '@qovery/shared/ui'
 
 export interface GkeKmsKeyProps {
   fromDetail?: boolean
@@ -82,14 +82,29 @@ export function GkeKmsKey({ fromDetail }: GkeKmsKeyProps) {
             },
           }}
           render={({ field, fieldState: { error } }) => (
-            <InputText
-              name={field.name}
-              onChange={field.onChange}
-              value={(field.value as string) ?? ''}
-              label="KMS Key"
-              placeholder="projects/{project}/locations/{location}/keyRings/{keyRing}/cryptoKeys/{key}"
-              error={error?.message}
-            />
+            <>
+              <InputText
+                name={field.name}
+                onChange={field.onChange}
+                value={(field.value as string) ?? ''}
+                label="KMS Key"
+                placeholder="projects/{project}/locations/{location}/keyRings/{keyRing}/cryptoKeys/{key}"
+                error={error?.message}
+              />
+              <Callout.Root color="yellow">
+                <Callout.Icon>
+                  <Icon iconName="warning" iconStyle="regular" />
+                </Callout.Icon>
+                <Callout.Text>
+                  <Callout.TextDescription>
+                    The KMS key must be <strong>in the same region as your GKE cluster</strong> <br />
+                    <strong>Never delete the KMS key associated with your cluster</strong> - doing so will permanently
+                    and irrecoverably destroy all encrypted data, including node disks, persistent volumes, and
+                    Kubernetes secrets.
+                  </Callout.TextDescription>
+                </Callout.Text>
+              </Callout.Root>
+            </>
           )}
         />
       )}